Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/tKXJ-bn7ekJ1V_PtpWdsDb67j6Y.roa
File:                     tKXJ-bn7ekJ1V_PtpWdsDb67j6Y.roa (raw, json)
Hash identifier:          R7SOU321WN+dMfZCAhT8VM1ccIg2PIv/tabmgQ8a7pI=
Subject key identifier:   B4:A5:C9:F9:B9:FB:7A:42:75:57:F3:ED:A5:67:6C:0D:BE:BB:8F:A6
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       019093FAEFFDA2A76245789CE7130F62AC40
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/tKXJ-bn7ekJ1V_PtpWdsDb67j6Y.roa
Signing time:             Mon 08 Jul 2024 20:13:34 +0000
ROA not before:           Mon 08 Jul 2024 20:13:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 21:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:93:fa:ef:fd:a2:a7:62:45:78:9c:e7:13:0f:62:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jul  8 20:13:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b4a5c9f9b9fb7a427557f3eda5676c0dbebb8fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:99:00:35:37:79:1d:a9:b9:f0:a6:7f:76:61:
                    52:e4:86:26:4b:f8:8f:d4:82:19:b3:76:92:2f:dd:
                    10:b4:37:bc:aa:4e:49:a5:7d:a2:ab:f3:7c:ec:0b:
                    e1:c2:49:d9:32:36:19:05:ac:a4:2c:e2:a6:7e:ca:
                    55:2f:dd:c6:e0:4e:53:66:5e:99:5b:b2:6a:18:4c:
                    f7:67:ff:e4:64:3f:25:47:a5:3a:e6:a0:e5:f0:9b:
                    4a:93:3c:a3:94:25:55:28:f3:89:c5:28:08:ee:94:
                    43:c3:49:d2:b3:f6:13:01:76:dc:ea:6e:ad:8c:d9:
                    b8:0b:73:fa:4d:6b:4c:db:01:95:28:a4:5e:ff:f4:
                    9f:05:44:35:2d:82:52:2f:ce:cb:a9:44:03:e5:d3:
                    db:01:9d:e7:63:c3:a5:88:93:87:8d:86:14:b0:ae:
                    d4:67:c0:60:2a:4a:61:8d:0c:11:1c:c7:11:70:1d:
                    84:6f:6a:0f:e4:74:3a:7c:f0:b5:63:b4:aa:30:99:
                    55:3a:09:22:24:8d:bd:03:85:ef:13:56:bf:74:17:
                    b5:30:15:bc:af:13:19:ae:7b:c1:ab:3a:8e:fc:5e:
                    17:5e:21:28:80:30:cb:ea:1c:d7:43:0b:dd:d1:b0:
                    45:ef:0b:90:0f:6e:d9:de:8c:4e:54:60:82:28:7b:
                    66:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A5:C9:F9:B9:FB:7A:42:75:57:F3:ED:A5:67:6C:0D:BE:BB:8F:A6
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/tKXJ-bn7ekJ1V_PtpWdsDb67j6Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:3a:55:6e:e3:3e:96:2d:e3:1c:29:36:2b:c9:38:9d:63:56:
         74:85:64:8d:54:f0:9b:20:15:71:e0:a6:3f:65:a5:d2:17:60:
         1f:c2:e7:fb:b7:9c:89:02:18:4b:c3:1b:5b:73:fb:dc:51:4f:
         6b:d3:04:5d:56:49:3b:a1:58:0d:d3:df:20:23:69:4e:ac:3c:
         52:5f:b0:47:fa:53:58:95:f1:8a:ee:f8:a8:8c:37:54:ba:44:
         c6:35:19:98:c6:b2:55:57:2f:96:95:b2:60:3d:eb:49:8c:55:
         7e:ad:6f:e0:ba:1b:ed:86:fc:06:c6:42:e8:47:52:3d:66:44:
         c0:fd:f7:5c:ab:e9:5f:8e:bb:b6:90:e1:c8:48:ab:13:02:c9:
         f1:f8:9d:9f:c0:28:0d:e6:11:f1:79:8e:58:68:58:43:e2:bd:
         fd:1c:9b:32:5f:99:2b:df:13:50:3c:aa:ec:1c:89:b0:68:c3:
         2e:7a:bb:2c:4b:a6:76:4e:82:30:7f:fa:cc:f3:03:f2:b0:57:
         73:52:89:50:6b:59:f2:80:1c:59:0d:70:2d:d6:20:f6:c5:27:
         77:87:47:77:32:c5:38:3d:d4:51:7b:ad:ca:8e:eb:04:97:9f:
         69:e8:4c:88:25:ca:56:20:e9:7e:cc:65:38:37:ef:fd:b3:0b:
         49:0d:12:8a
-----BEGIN CERTIFICATE-----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